Newsroom Update

The redesigned iPad Air and new iPad Pro with Apple silicon are now available. Learn more >

Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

iOS virus

I need to know how to remove the redirect virus that affects iOS and redirects random links to filthy sites, including personal ad sites and streaming sites. It is a SERIOUS issue that needs to be addressed IMMEDIATELY. I have never jail broken this or any iOS device on my network, and have only had this iPad for a few weeks and it is infected. Researching this exploit on the Internet shows that it stems from the root user having a password that any device on the same network can exploit... This is a SERIOUS ISSUE and A COMMON ISSUE that hundreds of people have. Tis needs to be addressed immediately. Please report here If you notice even a momentary redirect in safari or any other app, as it's not limited to just the browser. If you have ever seen your iOS device randomly restart and you thought it was a crash, that is how the exploit works.


This is a video of the exploit/virus in another form.. Now it doesn't block search results from coming up... I know that it is in iOS because it happens in sites that I manage, and random sites/apps constantly. Please acknowledge and fix this exploit IMMEDIATELY.


http://www.youtube.com/watch?v=eRWyMmXKosI


I've already wiped this iPad and completely restored it from a backup, and set it up as a new device as well. This continues to be infected and there is no way I can remove it.

iPad 2, iOS 5.0.1, Redirect virus help!

Posted on Mar 7, 2012 5:07 AM

Reply
92 replies

Apr 26, 2012 6:10 PM in response to vlwithipad2

When you don't know what you're talking about and speak utter rubbish, be prepared to be corrected. Ok?


1GB is not enough space. You need to remove things you don't need or use. Make sure that you have no app running in so quit them in the multitask bar. As I said, good practice is to have 10% of your drive space free so the system runs smoothly and optimally. You're over taxing it by have very little space for the system to operate.


It would have been far more constructive to post your issues first, rather than going off the rails and complaining about viruses on your iPad corrupting your device. It quite clear now what your problems are and how to fix them.


I bet you'd be frustrated too if people were reporting things that you know to be absolutely untrue. We operate on fact here. I was upholding the facts, trying to get through a point that some just clearly don't wish to understand. I don't come here to waste other people's time with unfounded conjecture.


Enjoy your day, and hope you can sort out your issues.

Apr 26, 2012 6:37 PM in response to latexink

I believe you mean Javascript exploit, i'm guessing its a XSS (Cross Site Scripting attack) where a malicious user enteres a piece of Javascript code into a text field, like this one we type in when we submitted our comments and submits it, the submited text along with the Javascript code is then saved to the webserver. Next time anyone loads the website with that comment, the Javascript runs and your web browser does something, typically redirect the user to another website. Javascript does not have much if any privileges on a computer to execute truly harmful code.


This is typically a problem of website owners actually, websites that take input from users need to parse and filter input before they are saved or when they are displayed. Any web browser is suceptible to this problem, this sort of attack is a problem with the website's own security actually, and there may be new ways to fool a commonly used filter.


If I am right in my guess and this is an XSS type attack, then you'll have report this problem to the website owner in question. XSS works on any web browser where Javascript is enabled. And if you turn off Javascript, the last time I tried it, Youtube won't even play videos, Javascript is used for many useful things, like detecting if you have Flash installed for example, so a website can decide on the fly wheather to show Flash video to you or HTML5 video, among many many other things.

Apr 26, 2012 6:39 PM in response to vlwithipad2

Look. I'm not trying to be nasty or anything of the sort, It's tiring hearing uneducated messages on these boards about things that just don't exist. You clearly had a belief your iPad was corrupted by a virus. As it now comes to light, your drive is almost to capacity and you're getting memory error messages. This is what will happen when you device is almost full or you have too many apps running in background.


Clear out your iPad, and you'll be ok.

Apr 26, 2012 8:02 PM in response to Andrew J

Thanks, I appreciate your honesty, and I agree that it can be hard to stay above the commotion when you're talking to people of little experience on a particular subject area. I too know the feeling, as I spend a lot of time on a support forum for one of the apps I use, where many of my posts are just explanations of simple things to new users.


As it happens, I already stopped of my background apps, and while I have not had any new LowMemory alerts, it did little to alleviate the sluggishness. Unfortunately, I cannot clear anymore disk space on my ipad, as I have pretty much no junk on there, it's almost all class materials and video lectures from itunesU. I don't even have games on there.


I will try more dramatic things like restoring from a back up after I take my last test this semester, since I will have more time then to play around with it then.


As I said previously, I have class materials on there, which was why I was worried about the possibility of a virus (corrupted/lost class stuff is not good), especially, since I did somehow loose all of my Pages and Keynote files for no apparent reason, not to mention my lost videos for one of my classes and my corrupted notes. The chances that four different apps would loose data within days of each other just seamed peculiar to me. Especially, since I still have room on my disk, and the iOS should not have overwritten on those files. I hope this explains why I believed there was a virus at work on my ipad, and I'm sorry for getting everyone riled up about this.

Anyways, peace

V.

Apr 26, 2012 8:00 PM in response to vlwithipad2

Try deleting your emails, even the ones in your trash. Navigate to your mail accounts, not your inbox, go to your trash and hit the edit button and delete all. You can choose to save your Pages documents and Keynote presentations to iCloud, then only download the ones you urgently need. Read this help blog on how to free up disc space on an iPad.


http://osxdaily.com/2012/04/24/6-tips-free-up-storage-space-ipad-iphone-ipod-tou ch/

Apr 26, 2012 8:31 PM in response to Andrew J

Thanks : ) that's a nice idea, I didn't think of deleting my emails (and I sure have a lot of them), but I wonder whether that would really help, since they're mostly just text, they shouldn't take up too much room, not more than 50 to 100 megabytes, I imagine. But I'll give it a try, you never know, it may work. You could be on the right track, thanks.


Yeah, the iCloud is what restored my lost Pages and Keynote files, you have no idea how glad I was, I needed those files lol : ).


Unfortunately though, I am not always connected to wifi, which makes it it difficult to completely rely on iCloud. I have other storage solutions though, which I generally back things up to, but I was lazy about it last week and hadn't backed up several important files, luckily they were restored YAY : ).


Anyways thanks for your help, I'll try the email suggestion tomorrow (since it's late here) and see if that helps. And, I'll take a look at your link.

Alrighty then,

Good night everyone,

Peace,

Thanks Andrew (and everyone else),

V. : )

Apr 26, 2012 9:44 PM in response to latexink

I can agree that exploits do happen, but they may not always come in a form of a virus, in softwares.


iOS is not perfect, that's why versions do upgrade.


However your question is very much directed at people with the relevant expertise; Apple care. Call the toll free line and get assistance there, there's nothing much regular consumers can assist you with.


In case some people say iOS has no major exploits, Codesigning exploit by a whitehat hacker with the middle name of Miller I believe. It's something of high-extreme severity which caught iOS last year, its on the internet. My point is not to start a debate.


You should get proper assistance from Apple if not, attempt a full restore without a backup and use DFU mode in iTunes to flush out your existing iOS software and load your iPad with a brand new iOS firmware, even if the version number is same.

Apr 27, 2012 8:20 AM in response to latexink

iPad DFU Mode instructions

Before attempting a DFU kind of full restore, do a final sync, make sure your iPad is holding a decent percentage of charge. Also, do make sure that your computer isn't going to shut down any soon (especially laptops). Also use a USB that is working consistently, not one that causes your iDevice to play the charging tone every other minute.


Follow steps 1 to 7, on step 8, direct your computer to the new restore file by holding ctrl+restore on iTunes for Windows. But, setup your iPad as a new iPad initially. Do note if your issues on post 1 is reproduceable. Finally, if everything's normal, try the backup. If that's the point where the issue reoccurs, you know its probably something related to the backup.


Cheers.

Apr 27, 2012 8:30 AM in response to latexink

I have no idea whether this is related to this thread, but as it describes an issue that could (practically) cause the behavior described in the OP, and no one has yet mentioned it, I will:


https://forms.fbi.gov/check-to-see-if-your-computer-is-using-rogue-DNS


Now, unless "forms.fbi.gov" is being spoofed...


What does your iPad say for its TCP/IP connection parameters? (Visit General / Network / Wi-Fi, click the blue-circled arrow on your connection, and check the DHCP settings.) The keys would be Router and DNS. If your iPad is using your Router as a DNS, you'd need to then check your DNS' effective settings for its router and DNS, in turn.

Apr 27, 2012 11:46 AM in response to latexink

I just thought of something, and it may seem completely ridiculous, but it's true.


When I use the iPad, I have a tendency of pressing the wrong links a lot. I resolve this by zooming in to link before I press it. And sometimes, I bring my hands too close to the screen and it triggers a button, without me physically contacting the screen. Maybe that's what's happening to you?


Since adds usually take up a large portion of the screen, it's not a stretch to imagine that you may inadvertently trigger them by keeping you're hands to close when you type, or even just holding the iPad.


This is especially true if your hands (like mine) get sweaty from typing, or holding the ipad.


Before you spend time changing the iOS, try to use a stylus and see if that helps : ).

That's what I do often.

See ya,

V.

Apr 30, 2012 8:26 PM in response to vlwithipad2

I may have spoken too soon, I just had a major crash today and my whole iPad froze up. And, when I tried to sync it to my computer, the sync froze too.


I don't understand, I had it for a year, and it never had any problems. And I never jailbroke it either.


Andrew: I did what you suggested and cleared 10% of the disc space. However, this apparently didn't help since the two crashes happened after I already cleared that space. Thanks anyway for the suggestion though.


At this point, I think I'll take it to a store and see what they say about it.

Thanks for everyone's help,

Peace


TO ANYONE WHO MAY HAVE THE SAME BEHAVIOR: tell me what apps you have, and we will compare your apps to mine, and maybe find the cause of this.

iOS virus

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple ID.